41% of official MCP servers lack authentication. This is the governance gap — and it is getting worse as agent deployments accelerate.